Client microservice for secure and efficient searchable encryption

A non-transitory computer readable medium including instructions that, when executed by at least one processor, cause the at least one processor to perform operations for implementing, as a microservice at a client, a searchable-encryption service, the operations comprising:

• executing the microservice at the client to perform operations including:
• encrypting data based on a cryptographic key accessible to the client;
• sending the encrypted data to a network storage resource;
• identifying, at the microservice, a search query in plaintext;
• encrypting the search query according to the cryptographic key;
• sending the encrypted search query to the network storage resource, the encrypted search query requesting the network storage resource to search directly on the encrypted data using the encrypted search query;
• and
• receiving a response to the encrypted search query from the network storage resource.